Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3136382e302e3234342e302f32322d3234203d3e203133343839.roa
File:                     3136382e302e3234342e302f32322d3234203d3e203133343839.roa (raw, json)
Hash identifier:          c8Xbm1zHNWcn17zb1MjH6KBiHYc1xgP0JpVWTT2KxDg=
Subject key identifier:   5A:2B:BF:B6:C9:96:ED:87:70:3E:80:0E:12:D4:87:2E:F0:5D:32:F9
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       44A942D8EC281F6335EC29E85DE991B2DA35687C
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3136382e302e3234342e302f32322d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:04 +0000
ROA not before:           Thu 19 Mar 2026 20:30:04 +0000
ROA not after:            Thu 18 Mar 2027 20:35:04 +0000
asID:                     13489
IP address blocks:        168.0.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a9:42:d8:ec:28:1f:63:35:ec:29:e8:5d:e9:91:b2:da:35:68:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:04 2026 GMT
            Not After : Mar 18 20:35:04 2027 GMT
        Subject: CN=5A2BBFB6C996ED87703E800E12D4872EF05D32F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:2f:ec:c5:15:ad:f4:30:2c:c6:42:73:3f:
                    4f:e9:e9:6f:15:54:1c:50:81:d4:60:e8:82:9e:52:
                    b6:4a:04:02:2a:9e:7b:98:81:79:72:53:9c:2b:85:
                    fa:b0:96:94:25:14:dd:5f:de:53:d0:a7:b1:84:17:
                    5b:57:a1:8b:a5:1f:81:7f:a3:ae:27:ec:01:73:12:
                    81:d9:22:c3:95:e8:dd:e8:96:45:a2:ea:7b:56:11:
                    a8:e7:33:c8:d0:aa:31:7e:b3:fa:79:91:1c:02:c8:
                    4b:91:74:0d:b8:d4:ad:af:08:e0:00:17:c0:ab:15:
                    5f:62:b1:f3:60:04:de:fd:b6:96:93:60:bb:6f:3c:
                    1f:e2:6f:48:83:99:0b:4c:31:f0:20:ba:5a:f6:f5:
                    e9:14:9c:be:d3:62:35:35:8f:47:a8:af:d6:d0:88:
                    e6:fd:22:37:6a:fe:fa:d6:c2:90:d5:bb:71:5d:71:
                    a9:7d:6c:90:5c:30:2f:7f:f3:2e:1a:8d:26:40:8f:
                    0f:2c:8e:4f:29:f8:cf:f4:01:71:c7:2f:a0:8d:ce:
                    97:c3:45:20:d8:01:73:c5:fb:1b:99:68:a2:54:83:
                    b8:0e:58:62:89:39:fc:1e:25:3a:ec:49:5c:da:29:
                    11:2e:af:d3:d4:fd:c4:71:4b:00:19:5e:c5:60:29:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2B:BF:B6:C9:96:ED:87:70:3E:80:0E:12:D4:87:2E:F0:5D:32:F9
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3136382e302e3234342e302f32322d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:83:52:e7:4f:18:c5:02:fb:5e:92:8e:14:bb:50:cf:eb:
         39:f0:6d:36:62:d4:14:27:1e:2b:08:73:8c:d2:0d:c6:57:b1:
         09:8c:06:32:df:6e:66:aa:3e:38:39:50:de:76:14:24:92:fc:
         ad:37:b7:96:87:8b:53:4a:b5:a1:2a:ba:9d:dd:9b:22:3d:b7:
         66:8d:e4:17:2f:b0:33:c9:a8:be:7e:9c:66:a2:ed:7e:a1:4c:
         d6:7f:e5:16:26:b5:3f:63:67:20:72:ee:ad:d7:32:19:78:42:
         44:98:7b:e8:04:32:62:3d:f0:4a:9f:5d:15:b8:cd:35:18:32:
         24:21:20:2f:da:12:88:0d:f7:33:ae:87:22:00:51:71:5e:58:
         8b:00:ec:27:2b:c6:26:ff:65:b9:3a:c1:0e:f9:ee:ed:03:ea:
         05:19:49:91:b9:ad:56:09:3d:40:29:1d:e3:95:13:eb:21:46:
         53:fd:1f:1c:d6:85:76:35:d7:80:83:1d:bb:3e:c4:2f:59:02:
         79:49:62:76:c8:be:9e:e3:4d:80:e9:c4:b0:23:be:4e:fe:68:
         24:37:6a:f4:fb:3a:08:1f:8e:a1:22:55:d8:f2:15:d4:b2:85:
         14:c4:df:4b:41:72:42:d1:58:db:df:5f:88:75:91:00:f8:f9:
         af:59:b1:b6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURKlC2OwoH2M17CnoXemRsto1aHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjAzMTkyMDMwMDRaFw0yNzAzMTgyMDM1MDRaMDMxMTAvBgNV
BAMTKDVBMkJCRkI2Qzk5NkVEODc3MDNFODAwRTEyRDQ4NzJFRjA1RDMyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhi/sxRWt9DAsxkJzP0/p6W8V
VBxQgdRg6IKeUrZKBAIqnnuYgXlyU5wrhfqwlpQlFN1f3lPQp7GEF1tXoYulH4F/
o64n7AFzEoHZIsOV6N3olkWi6ntWEajnM8jQqjF+s/p5kRwCyEuRdA241K2vCOAA
F8CrFV9isfNgBN79tpaTYLtvPB/ib0iDmQtMMfAgulr29ekUnL7TYjU1j0eor9bQ
iOb9Ijdq/vrWwpDVu3Fdcal9bJBcMC9/8y4ajSZAjw8sjk8p+M/0AXHHL6CNzpfD
RSDYAXPF+xuZaKJUg7gOWGKJOfweJTrsSVzaKREur9PU/cRxSwAZXsVgKZs9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUWiu/tsmW7YdwPoAOEtSHLvBdMvkwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzYzODJlMzAyZTMyMzQzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKoAPQwDQYJ
KoZIhvcNAQELBQADggEBAHyhg1LnTxjFAvteko4Uu1DP6znwbTZi1BQnHisIc4zS
DcZXsQmMBjLfbmaqPjg5UN52FCSS/K03t5aHi1NKtaEqup3dmyI9t2aN5BcvsDPJ
qL5+nGai7X6hTNZ/5RYmtT9jZyBy7q3XMhl4QkSYe+gEMmI98EqfXRW4zTUYMiQh
IC/aEogN9zOuhyIAUXFeWIsA7Ccrxib/Zbk6wQ757u0D6gUZSZG5rVYJPUApHeOV
E+shRlP9HxzWhXY114CDHbs+xC9ZAnlJYnbIvp7jTYDpxLAjvk7+aCQ3avT7Oggf
jqEiVdjyFdSyhRTE30tBckLRWNvfX4h1kQD4+a9ZsbY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:12 2026 by rpki-client